When should I contact law enforcement?

Contact law enforcement when criminal conduct is reasonably suspected, when instructed by insurer policy terms, or when required by local regulation. Immediate contact preserves forensic opportunities and demonstrates good-faith cooperation for claims.

Is notarization required for incident reports?

Notarization is generally not required for internal incident reports. Use notarization or RON only when a third party (insurer, court, or external authority) explicitly requires a notarized statement or affidavit.

How do I protect sensitive data during an investigation?

Limit access to investigation files, redact unrelated personal data, and follow HIPAA protocols if health information is implicated. Use secure storage and role-based access controls when sharing documents.

Can employees sign incident acknowledgments electronically?

Yes. Electronic signatures that meet ESIGN and UETA criteria are valid for internal acknowledgments, provided intent, consent, attribution, and reliable record retention are satisfied.

How long must investigation records be retained?

Retention depends on the record type and applicable law: follow internal retention plus legal minimums such as IRS or HIPAA where applicable. Err on the side of longer retention if litigation is possible.

What if an insurer requests additional documentation?

Provide the requested documentation promptly, preserve originals, and document all disclosures. Coordinate through legal or risk teams to avoid inadvertently waiving privilege or misapplying confidentiality rules.

Theft Policy

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

What a Theft Policy Is and When It Applies

A Theft Policy is an organizational document that defines how suspected, alleged, or confirmed theft is reported, investigated, and resolved. It establishes roles and responsibilities for employees, managers, security, human resources, and legal counsel; explains coordination with law enforcement and insurers; and sets expectations for evidence handling, confidentiality, and disciplinary measures. The policy typically covers employee theft, third-party theft, inventory shrinkage, data theft, and procedures for documenting incidents, preserving chain of custody, and initiating insurance claims or criminal referrals when appropriate.

Why a Clear Theft Policy Matters

A well-drafted Theft Policy reduces ambiguity in incident response, preserves evidence for insurers and prosecutors, protects organizational assets, and creates consistent standards for investigation and corrective action.

Who Needs a Theft Policy in Your Organization

Tailor scope and procedures based on scale, industry risks, and applicable legal or contractual requirements.

Operations and warehouse teams that control inventory and shipments and must document shortages accurately.
Human resources and legal departments that handle employee investigations, disciplinary processes, and compliance with employment law.
Risk, security, and finance staff responsible for insurance claims, loss prevention, and internal controls.

Primary Signers and Their Roles

Security Manager

The Security Manager oversees incident intake, secures physical evidence, coordinates with law enforcement when required, and maintains the investigation record. Their responsibilities include logging incidents, preserving chain of custody, and preparing summaries for claims or disciplinary review.

HR Director

The HR Director manages employee-facing investigations, ensures compliance with employment law and internal procedures, documents interviews and outcomes, and implements disciplinary or corrective actions consistent with policy and collective bargaining agreements where applicable.

How to Complete and Implement a Theft Policy

Follow a structured approach: draft, approve, communicate, train, and monitor enforcement. Maintain records of incidents and policy revisions.

01

Draft the Policy: Document scope, definitions, reporting channels, and investigation steps.
02

Obtain Approvals: Seek sign-off from legal, HR, finance, and executive leadership.
03

Communicate and Train: Distribute policy to staff and provide role-based training.
04

Monitor and Revise: Review incidents, adjust controls, and update the policy as needed.

How to Configure an Online Theft Policy Workflow

Set up a digital workflow that captures reports, routes approvals, and archives signed policies for audits.

Field	Configuration
Report Intake Form	Required fields, attachments, and conditional questions
Routing Rules	Auto-route to security, HR, and legal based on loss type
Approval Sequence	Role-based order: Security → HR → Legal → Exec
Retention Tagging	Assign retention periods and export formats

Where to Send Reports and Documents

A clear routing path ensures timely response and proper recordkeeping for internal and external stakeholders.

Internal Intake: Submit incident reports to security intake or designated mailbox.
HR Notification: Notify HR for incidents involving employees or suspected internal theft.
Law Enforcement: Contact local police when criminal conduct is suspected.
Insurer Notice: Provide timely notice to the insurance carrier per policy terms.

Digital Signing and Secure Submission

Ensure the chosen platform meets regulatory or contractual requirements before submitting signed records to insurers or law enforcement.

Document Format: Use PDF or PDF/A for final signed versions.
Authentication: Apply signer authentication such as email verification or SMS code.
Audit Trail: Record timestamps, IPs, and actions for each signer.

Key Deadlines and Timing Expectations

Timely action affects investigations, evidence preservation, and insurance claim acceptability. Note deadlines for reporting and recordkeeping.

Immediate Reporting:

Report incidents to security or management as soon as discovered.

Law Enforcement Contact:

Contact police promptly when criminal activity is suspected; delay may impair investigations.

Insurer Notice:

Notify your insurer per the policy’s required timeframe; many require prompt or 'as soon as reasonably possible' notice.

Internal Investigation:

Complete primary investigative steps within 7–30 days depending on complexity.

Record Retention:

Tag incident files for the applicable retention period defined in the retention timeline.

Milestones in an Incident Response Timeline

A milestone view clarifies who does what and when during the course of a theft investigation.

01

Discovery and Secure Scene

Identify loss, secure evidence, and prevent further access or tampering.

02

Initial Report

Submit intake form and notify designated internal stakeholders.

03

Investigation and Interviews

Conduct interviews, collect CCTV, and document findings.

04

Disposition and Follow-up

Notify insurer, pursue disciplinary or legal action, and update controls.

Common Preparation and Implementation Pitfalls

Unclear definitions about what constitutes theft versus loss, leading to inconsistent investigative paths and outcomes.
Failing to preserve chain of custody for physical or digital evidence, which weakens insurer or prosecutorial cases.
Neglecting to document interviews or retain CCTV exports, creating gaps in records needed for claims or discipline.
Not aligning the policy with employment law or union contracts, risking procedural challenges during disciplinary actions.

Consequences of Incomplete or Incorrect Policies

Insurance Denial: Late or improper notice can void coverage or lead to claim denial.

Evidence Admissibility: Poor chain of custody may render evidence inadmissible in court.

Employee Litigation: Procedural errors in investigations can expose the employer to wrongful termination claims.

Regulatory Scrutiny: Certain industries may face regulator inquiries for inadequate loss controls.

Reputational Harm: Public mishandling of incidents can damage customer or partner trust.

Operational Loss: Unaddressed control gaps can lead to repeat incidents and monetary loss.

Required Information to Capture on Each Incident

Incident ID: Unique case identifier.

Date and Time: When the loss was discovered.

Reporting Party: Name and contact details.

Assets Affected: Item description, serial numbers.

Evidence Collected: CCTV clips, logs, physical exhibits.

Disposition: Investigation outcome and actions taken.

eSignature Pricing Comparison for Theft Policy Workflows

Pricing and feature availability vary; signNow is listed first. Confirm plan details with each vendor before purchasing.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium+)	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Audit Trail	Yes	Yes	Yes	Yes	Yes
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Practical Examples of Theft Policy Use

Two short scenarios show how the Theft Policy supports investigations and claims handling in everyday operations.

Property Management Example

A property manager documents lost appliances and secures CCTV export immediately

Investigator tags evidence and files a police report within 24 hours
The documented chain of custody and timely insurer notice enabled a partial recovery and informed tenant remediation steps.

Retail Loss Example

A store discovers inventory shrink during cycle count and triggers the theft policy

Security collects transactions and interviews staff under HR supervision
Digital records and time-stamped signatures supported a concise internal investigation and an insurance claim submission.

Frequently Asked Questions About the Theft Policy

Answers to common implementation and compliance questions to help administrators avoid delays and legal pitfalls.

Need help? Contact support

When should I contact law enforcement?
Contact law enforcement when criminal conduct is reasonably suspected, when instructed by insurer policy terms, or when required by local regulation. Immediate contact preserves forensic opportunities and demonstrates good-faith cooperation for claims.
Is notarization required for incident reports?
Notarization is generally not required for internal incident reports. Use notarization or RON only when a third party (insurer, court, or external authority) explicitly requires a notarized statement or affidavit.
How do I protect sensitive data during an investigation?
Limit access to investigation files, redact unrelated personal data, and follow HIPAA protocols if health information is implicated. Use secure storage and role-based access controls when sharing documents.
Can employees sign incident acknowledgments electronically?
Yes. Electronic signatures that meet ESIGN and UETA criteria are valid for internal acknowledgments, provided intent, consent, attribution, and reliable record retention are satisfied.
How long must investigation records be retained?
Retention depends on the record type and applicable law: follow internal retention plus legal minimums such as IRS or HIPAA where applicable. Err on the side of longer retention if litigation is possible.
What if an insurer requests additional documentation?
Provide the requested documentation promptly, preserve originals, and document all disclosures. Coordinate through legal or risk teams to avoid inadvertently waiving privilege or misapplying confidentiality rules.

Explore Templates

Oklahoma Release of Liens Oklahoma Release Lien Oklahoma Report on Guardianship of Property Oklahoma Affidavit of Notice by Publication Oklahoma Application for Return of Allegedly Stolen Property Oklahoma Notice of Hearing Form

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now